DMARC monitoring dashboard for aggregation and forensics data
I would like to see a reporting dashboard like dmarcian.com inside Proton Mail, so that I do not have to expose statistics and even PII related to my email behavior with 3rd party systems. I would like Proton to allow me to configure a Proton-owned email address in the rua and ruf DMARC DNS record fields.
The main reason is that forensics reports (RUF) contain personal identifyable information (PII). But also the aggregate reports (RUA) contain aggregated information which exposes to which email servers I have been sending email.
Currently my options are:
1. No RUA or RUF entries in DMARC, so I am blind to DMARC failures or email spoofing attempts
2. Using one of my own email addresses in the DMARC record, but then I will have to decipher the .json.gz files manually to read the reports one by one.
3. Using a 3rd party service like dmarcian.com or similar to interpret my DMARC reports, exposing sensitive information.
Currently option 2 is what I am using, but it would make life much easier if Proton could provide visibility on the DMARC policy that I am using, allowing users to safely move from no action to a strict policy, and allowing users to be informed about emails that did not arrive at the sender due to SPF or DKIM failure.
A rudimentary approach covering part of what to https://dmarcian.com/dmarc-saas-platform/ can do would be wonderful.
Adding TLS reporting data from the TLS-RPT DNS record in this same dashboard would be much appreciated. See https://www.dmarcly.com/blog/how-to-set-up-mta-sts-and-tls-reporting for an example of what this could look like.
